CVE-2024-29201 JumpServer's insecure Ansible playbook validation leads to RCE in Celery

JumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can bypass the input validation mechanism in JumpServer's Ansible to execute arbitrary code within the Celery container. Since the Celery container runs with root privileges and has databas...

BELL-CVE-2024-27281

Bulletin has no description...

CVE-2023-45931

Mesa 23.0.4 was discovered to contain a NULL pointer dereference in checkxshm for the haserror state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated...

CVE-2024-29881

TinyMCE is an open source rich text editor. A cross-site scripting XSS vulnerability was discovered in TinyMCE’s content loading and content inserting code. A SVG image could be loaded though an object or embed element and that image could potentially contain a XSS payload. This vulnerability is...

BELL-CVE-2024-2494

Bulletin has no description...

PT-2024-23086 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.187 Description: The issue concerns a weak security check in the uploadLogo function within the OrganisationsController.php file. This function does not properly validate logo uploads. Recommendations: For versions...

BELL-CVE-2024-26638

Bulletin has no description...

BELL-CVE-2023-52616

Bulletin has no description...

BELL-CVE-2024-26633

Bulletin has no description...

BELL-CVE-2023-52610

Bulletin has no description...

BELL-CVE-2023-52614

Bulletin has no description...

BELL-CVE-2023-39368

Bulletin has no description...

BELL-CVE-2023-52589

Bulletin has no description...

BELL-CVE-2024-26627

Bulletin has no description...

BELL-CVE-2023-52559

Bulletin has no description...

BELL-CVE-2023-52562

Bulletin has no description...

BELL-CVE-2023-52564

Bulletin has no description...

openSUSE: Security Advisory for libXpm (SUSE-SU-2023:3965-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for bluez (SUSE-SU-2024:0182-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-52523 bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject skmsg egress redirects to non-TCP sockets With a SOCKMAP/SOCKHASH map and an skmsg program user can steer messages sent from one TCP socket s1 to actually egress from another TCP socket s2: tcpbpfsendmsgs1 //...